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Method for e stab l ishing a l im i t valu e of an operat i onal paramotor 
of a nucl e ar reactor, corresponding syst e m, computer program and 

m e dium. 

METHOD FOR ESTABLISHING A LIMIT VALUE OF AN OPERATIONAL ^ 
PARAMETER OF A NUCLEAR REACTOR, CORRESPONDING SYSTEM, 
COMPUTER PROGRAM AND MEDIUM 

FIELD OF THE INVENTION 
5 The present invention relates to a method for establishing at least a limit value for 
at least a first operational parameter of a nuclear reactor comprising a core, in 
which fuel assemblies are loaded, the fuel assemblies comprising fuel rods each 
comprising pellets of nuclear fuel and a cladding which surrounds the pellets. The 
invention applies, for example, to pressurized water reactors. 

10 

BACKGROUND INFORMATION 

A large number of these reactors are currently used around the world. It may be 
advantageous, in particular in countries such as France where 80% of electricity 
is produced by nuclear reactors, for the total power supplied by the reactors to 
15 vary in order to be adapted to the needs of the electrical network which they 
supply. 

In particular, it is desirable to be able to operate the reactors at reduced power for 
a long period of time, when demand on the network is low, before reverting to 
20 nominal power, as necessary. 

For a ll that. such Such use of each reactor, which would allow its capabilities to be 
better used, should not result in safety problems. 

25 SUMMARY 
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An ebiee tobiective of the present invention is to solve this problem by providing a 
method which allows at least a limit value of an operational parameter of a 
nuclear reactor to be established, allowing the capabilities of the reactor to be 
better used, whitst while maintaining safe operation of the reactor. 

5 

To this end, the present invention relates to a method for establishing at least a 
limit value of at least a first operational parameter of a nuclear reactor comprising 
a core, in which fuel assemblies are loaded, the fuel assemblies comprising fuel 
rods each comprising pellets of nuclear fuel and a cladding which surrounds the 
10 pellets, characterized i n that i tw herein the method comprises the steps of: 

b) simulating at least a transient operational occurrence of the nuclear 
reactor, 

c) calculating the value reached by a physical quantity during the transient 
operational occurrence in at least a cladding of a fuel rod and 

15 d) establishing, as a limit value, the value of the first operational parameter 

when the value calculated in step c) corresponds to a value for the physical 
quantity which characterizes a failure of the cladding. 

According to specific embodiments, the method may comprise one or more of the 
20 following features, taken in isolation or according to all technically possible 
combinations: 

- it comprises, before step b), a step for: 

a) establishing a failure value for the physical quantity which characterizes 
a failure of the cladding, 
25 - step a) comprises the subsidiary steps of: 

a1) subjecting fuel rods to gradients of nuclear power, 
a2) calculating the values reached by the physical quantity in at least a 
cladding which has failed during a power gradient, 

a3) selecting the minimum value from the values reached which are 
30 calculated in step a2), 

- the failure value used in step d) is equal to the minimum value 
selected in step a3), 
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, * • * • 

- the failure value used in step d) is equal to the minimum value 
selected in step a3) and corrected by a factor which represents an operating 
mode of the reactor, 

- the method comprises, before step c), a step for: 

5 b') establishing at least a fuel rod whose cladding is the most stressed 

during the transient occurrence simulated in step b), 

and step c) is carried out for the or each rod which is established in step 

- step b') comprises the subsidiary steps of: 

10 b'1) evaluating the value reached by the physical quantity in the claddings 

of a plurality of fuel rods and 

b'2) selecting, as the rod whose cladding is the most stressed, the rod 
whose value evaluated in step b'1) is the highest, 

- the first operational parameter is the power per unit length supplied 
15 by a fuel rod, 

- the first operational parameter is a period of time for operation of the 
reactor at an intermediate power less than its nominal power, 

- the limit value is a limit value for triggering an emergency shutdown 
of the reactor, 

20 - the method further comprises at least a step for: 

e) establishing a limit value for triggering an alarm from the limit value for 
an emergency shutdown established in step d), 

- step b) is carried out for at least an operating mode of the reactor 
selected from the group constituted by: 

25 • an operating mode at a total power of the reactor equal 

to its nominal power, 

• an extended operating mode at intermediate power, in 
which the total power of the reactor is less than its 
nominal power over a period of time of at least 8 hours 

30 per period of 24 hours, 

• a continuous network operating mode, in which the total 
power varies alternately around a high power and 
around a low power, 

MARKED UP VERSION OF THE 

SUBSTITUTE SPECIFICATION 3 

DOC 9851 32v1 



• a primary control operating mode, in which the total 
power of the reactor varies by from 0 to 5% around a 
reference value in the order of between 95 and 100% of 
the nominal total power of the reactor, 

5 - for at least an operating mode, the steps b) to d) are used for another 

operating mode with, as the failure value of the physical quantity, the failure value 
of that other operating mode corrected by a corrective value, 

- the transient occurrence simulated in step b) is a transient 
occurrence selected from the group comprising: 

10 • an excessive increase in load, 

• an uncontrolled removal of at least a group of control 
clusters, 

• one of the control clusters falling, 

- the physical quantity is a stress or a function of stress(es) in the 
15 cladding and 

- the physical quantity is a deformation energy density in the cladding. 

The invention further relates to a system for establishing at least an operational 
parameter of a nuclear reactor, characterized in that ttthe svstem comprises 
20 ff^eaft san arranoement for carrying out the steps of a method as defined above. 

According to one varian t exemolarv embodiment , the method comprises at 
least a computer and storage means, in which at least a program for carrying out 
steps of the establishing method carried out by the system are stored. 

25 

The invention further relates to a computer program comprising 
instructions for carrying out the steps of a method as defined above. 

The invention further relates to a medium which can be used in a computer 
30 and on which a program as defined above is recorded. 

BRIEF DESCRIPTION OF THE DRAWINGS 
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The invention will be better understood from a reading of the description below 
which is given purely by way of example with reference to the appended 
drawings, in which: 

5 —Figure 1 is a schematic view illustrating a pressurized water nuclear reactor, 

—Figure 2 is a schematic side view of a fuel assembly of the core of the reactor of 
Figure 1 , 

10 -Figure 3 is a schematic longitudinal section through a fuel rod of the assembly 
of Figure 2, 

-Figure 4 is a block diagram of a system for establishing limit values for 
operational parameters of the reactor of Figure 1 , 

15 

-Figure 5 is a flow chart illustrating successive steps of the method carried out by 
the system of Figure 4, 

—Figure 6 is a line illustrating power gradient tests carried out on fuel rods, 

20 

-Figure 7 is a graph illustrating the maximum stresses reached in the claddings 
of fuel rods during power gradient tests, 

-Figure 8 is a chart representing operational envelopes of the reactor of Figure 1 . 

25 

-Figure 9 is a line illustrating the simulation of a transient power occurrence when 
the reactor of Figure 1 is being operated for an extended period at intermediate 
power, 

30 —Figure 10 is a view similar to Figure 9, the transient occurrence being simulated 
after extended operation at intermediate power, then reversion to operation at 
nominal power and 

I 
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-Figure 1 1 is a line illustrating the continuous network operation of the reactor. 



DETAILED DESCRIPTION 

Figure 1 schematically illustrates a pressurized water nuclear reactor 1 which 
5 conventionally comprises:- a core 2,- a steam generator 3,- a turbine 4 which is 
connected to an electrical energy generator 5 and- a condenser 6. 

The reactor 1 comprises a primary circuit 8 which is provided with a pump 9 and 
in which pressurized water circulates along the path indicated by the arrows in 

10 Figure 1 . That water rises in particular through the core 2 in order to be re-heated 
at that point, bringing about the cooling of the core 2.The primary circuit 8 further 
comprises a pressurizer 10 which allows the water which circulates in the primary 
circuit 8 to be pressurized. The water of the primary circuit 8 also supplies the 
steam generator 3, where it is cooled, bringing about the evaporation of water 

15 which circulates in a secondary circuit 12. 

The steam produced by the generator 3 is channelled by the secondary circuit 12 
towards the turbine 4, then towards the condenser 6 where that steam is 
condensed by indirect heat exchange with the cooling water which circulates in 
20 the condenser 6. The secondary circuit 12 comprises a pump 13 and a re-heater 
14 downstream of the condenser 6. 

I n conv e nt i ona l mann e r. th e The core 2 also comprises fuel assemblies 16 which 
are loaded in a vessel 18. Only one assembly 16 is illustrated in Figure 1 , but the 
25 core 2 comprises, for example, 157 assemblies 16. 

The reactor 2 comprises control clusters 20 which are arranged in the vessel 18 
above some assemblies 16. Only one cluster 20 is illustrated in Figure 1, but the 
core 2 may comprise, for example, approximately 60 clusters 20, 

30 

The clusters 20 can be displaced by mechanisms 22 in order to be introduced 
into the fuel assemblies 16, above which they are suspended. Conventionally, 
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each control cluster 20 comprises control rods of a material which absorbs 
neutrons. 



In this manner, the vertical displacement of each cluster 20 controls the reactivity 
5 of the reactor 1 and permits variations in the total power P supplied by the core 2 
from zero power up to nominal power PN in accordance with the insertion of the 
clusters 20 in the fuel assemblies 16. 

Some of thos ethese clusters 20 are intended to bring about control of the 
10 operation of the core 2, for example, in terms of power or temperature, and are 
referred to as control rod clusters. Others are intended to shut down the reactor 1 
and are referred to as shutdown clusters. 

The clusters 20 are combined in groups in accordance with their type and their 
15 intended purpose. For example, for 900 MWe CPY type reactors, those groups 
are referred to as groups G1, G2, N1, N2, R, SA, SB, SC, SD... 

As illustrated in Figure 2, each fuel assembly 16 conventionally comprises a 
network of fuel rods 24 and a skeleton 26 for supporting the rods 24. 

20 

The skeleton 26 conventionally comprises a lower connecting piece 28, an upper 
connecting piece 30, guide tubes, which connect the two connecting pieces 26 
and 28 and which are intended to receive control rods of the clusters 20, and 
spacer grids 32. 

25 

As illustrated in Figure 3, each fuel rod 24 conventionally comprises a cladding 33 
in the form of a tube which is closed at the lower end thereof by a lower closure 
34 and at the upper end thereof by an upper closure 35. The rod 24 comprises a 
series of pellets 36 which are stacked in the cladding 33 and which rest against 
30 the lower closure 34. A holding spring 40 is arranged in the upper portion of the 
cladding 33 in order to rest against the upper closure 35 and the upper pellet 36. 
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Conv e ntiona ll y, thoj hg pellets 36 are of uranium oxide and the cladding 33 is of 
zirconium alloy. 

In Figure 3, which corresponds to a fuel rod 24 which is in the state after 
5 production and before irradiation, there is radial play J between the pellets 36 and 
the cladding 33. This is illustrated in greater detail by the enlarged, circled part of 
Figure 3. 

When the reactor 1 is to operate, for example, at its nominal total power PN, the 
10 nuclear fuel of the pellets 36 will be, in accordance with the term used in the art, 
conditioned. 

The conditioning is substantially characterized by the closure of the play J 
between the pellets 36 and the cladding 33 owing to the creep of the cladding 33 
15 and the swelling of the pellets 36. 

More specifically, it is possible to set out the following steps for each pellet 36: 

1) Under the effect of the difference in pressure between the exterior (water of the 
primary circuit 8) and the interior of the rod 24, the cladding 33 is progressively 
deformed by creeping radially towards the inner side of the rod 24. All things 
othen/vise being equal, the rate of creep of the cladding 33 is a characteristic of 
the material which constitutes it. Furthermore, the fission products which are 
retained for the most part in the pellet 36, bring about swelling of the pellet 36. 
During that phase, the stress of the cladding 33 from the point of view of the 
loadings is purely the result of the differential pressure which exists between the 
exterior and the interior of the rod 24. The stresses in the cladding 33 are 
compression stresses (conventionally negative). 

30 2) Contact between the pellet 36 and the cladding 33 begins at the end of a 
period of time which substantially depends on the local irradiation conditions 
(power, neutron flux, temperature...) and the material of the cladding 33. In 
reality, contact is brought about progressively over a period of time which starts 
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20 



25 



with soft contact followed by strong contact being brought about. The contact 
pressure of the oxide of the pellet 36 on the inner face of the cladding 33 leads to 
an inversion of the stresses in the cladding 33, which become positive and tend 
to urge the cladding in terms of traction. 
5 3) The swelling of the pellet 36 continues and imposes its deformation on the 
cladding 33 in an outward direction. When a permanent state is established, that 
expansion is sufficiently slow for the relaxation of the material of the cladding 33 
to allow equilibrium of the efforts in the cladding 33. Analysis shows that, under 
those conditions, the level of stresses in terms of traction is moderate (a few tens 
10 of MPa) and does not pose any risk with respect to the integrity of the cladding 
33. 

Although there is no risk of the cladding 33 failing during a permanent state 
because of the thermomechanical equilibrium in the cladding 33 at levels of 
15 stress which are fairly low, a risk occurs as soon as the power supplied by the rod 
24 varies strongly. 

An increase in power brings about an increase in the temperature in the rod 24. 
Given the difference in the mechanical characteristics (thermal expansion 
20 coefficient, Young's modulus) and the difference in temperature between the 

pellet 36 of uranium oxide and the cladding 33 of zirconium alloy, the pellet 36 will 
expand more than the cladding 33 and impose its defonnation on the cladding 33. 

Furthermore, the presence of corrosive fission products, such as iodine, in the 
25 space between the cladding 33 and the pellet 36 produces the conditions for 

stress corrosion. I n that manno r As a result , the deformation imposed by the pellet 
36 on the cladding 33 during a transient occurrence, or variation, in power may 
bring about a failure of the cladding 33. 

30 Such a fa il ur e Failure of the cladding 33 is not allowed for safety reasons because 
it could result in the release of fission products in the primary circuit 8. 
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Transient power occurrences may be brought about during normal operation of 
the reactor 1 , that i s to sav such as . in situations referred to as category 1 . 
Variations in power can be necessary, in particular in order to adapt to the needs 
for electrical energy of the network which the generator 5 supplies. Transient 
5 power occurrences can also be produced during accident situations, referred to 
as category 2, such as an excessive increase in load, uncontrolled removal of a 
group or groups of clusters 20 in use, the dilution of boric acid or undetected 
dropping of clusters 20. 

10 In order to ensure the integrity of the rods 24 with respect to the interaction of 
pellets 36 and claddings 33, the invention proposes to establish limit values for 
operational parameters of the reactor 1 , taking into consideration that 
pellet/cladding interaction. 

15 To that end, it is possible to use, for example, a data-processing system 40 such 
as that in Figure 4. That system 40 comprises, for example, an information 
processing unit 42 which comprises one or more processor(s), a,data storage 
m e ans arranqement 44, gn^input/output mean sarranoement 46 and oot i onal l v an 
optional display meaf^ arranaement 48. 

20 

The method for establishing limit values for the operational parameters is 
illustrated by the flow chart of Figure 5. 

A first step illustrated by the block 50 cons i sts in recites establishing a value of a 
25 physical quantity for which a failure of a cladding 33 of a rod 24 occurs in the 
event of an increase in the nuclear power supplied by the rod 24. 

The physical quantity is, for example, the circumferential and normal stress Oee in 
the cladding 33. In other variants, it may be a function of stress(es), for example, 
30 the difference between Oqq and the radial and normal stress Or or the deformation 
energy density in the cladding 33. 
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In order to establish the failure value, it is possible to subject a given number of 
portions of rods 24 which are, for example, pre-irradiated in power reactors and 
therefore correspond to various burn-up levels, to gradients or an abrupt increase 
in power in test reactors. 

5 

Gradients of this type are schematically indicated in Figure 6, in which the power 
per unit length PLIN supplied by a rod portion 24 is marked on the ordinate and 
the time is marked on the abscissa. 

10 The dashed line 52 in Figure 6 illustrates a power gradient to which a rod portion 
24 is subjected, during which no failure of the cladding 33 is produced. 

The high power supplied by the rod portion 24 at the end of the gradient is 
illustrated by the portion 54 of the line 52. This high power is maintained for 
15 several hours. 

The solid line 56 illustrates the case of a rod portion 24 for which a failure of the 
cladding 33 is produced. In that case, the gradient which is schematically 
indicated by the portion 58 of the line 56 is interrupted immediately and the power 
20 PLIN is brought rapidly to 0. 

For each rod portion 24, the maximum value QeeMAx reached by the physical 
quantity oee is calculated by m e ans of software which is designated 60 in Figure 5 
and which is. for example, stored in the storage meafts arranqement 44 of the 
25 system 40. Such software 60 may be a conventional piece of software which 
makes use of the finite elements in order to model the thermomechanical 
behavior of the rod portion 24. 

Figure 7 shows the values Oggmax calculated in this manner for all of the portions 
30 of rods 24 which each correspond to a different level of burn-up. In Figure 7, the 
stress is marked on the ordinate and the burn-up on the abscissa. The failure 
value retained will be less than or equal to the minimum from the values aeeMAx 
for which a failure of the cladding 33 has effectively been brought about. 
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In the example o fprovided in Figure 7, only one failure has been produced in a 
rod 24 which is indicated by the solid square 61. Thus, the failure value OeeRUP 
retained for the remainder of the method is approximately 535 MPa. 
5 Subsequently, as schematically indicated by the block 62 in Figure 5, the 
historical power data are produced for each rod 24 present in the core 2. 

The local thermomechanical state of a rod 24 depends on those historical data. 
Therefore, it may be advantageous to know the historical data of the power 
10 supplied by each rod 24 since its introduction into the core 2 up to the time of an 
accident which is to be simulated. 

Those historical data can be established with software for modeling the neutron 
behavior of the rods 24, which software is designated 63 in Figure 5 and stored in 
15 the means 44. Such software may be a conventional piece of software based on 
the finite elements. 

The historical operational data relating to each rod 24 are generated for various 
operating modes of the core 2, that is to say: 
20 - basic operation in which the total power P of the core 2 is equal to its 

nominal power PN, 

- operation at reduced power with the control clusters 20 introduced in 
the fuel assemblies 16, 

- operation at reduced power with the control clusters 20 removed from 
25 the fuel assemblies 16. 

The historical data can be generated taking into consideration various levels of 
reduced power, for example, 10% PN, 30% PN, 50% PN... 

30 The simulation of the initial conditions of a category 2 accident, illustrated by the 
block 64 in Figure 5, is carried out by means of the software 63 and, for example, 
by means of other software 65 for simulating the behavior of the whole of the 
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reactor 1. This may be conventional software, including in particular consideration 
of the regulations of a system for protecting the reactor 1 . 

The conditions simulated during step 64 correspond to a so-called category 1 
5 situation. 

Such a situation is located in envelope 66 of the chart of Figure 8, in which the 
percentage of the total power P of the reactor 1 relative to its nominal power PN 
is marked on the ordinate and the power spacing Al between the upper portion 
and the lower portion of the core is marked on the abscissa. 

10 

The initial conditions in the plane P/AI are selected so as to maximize the 
increase in the local power in the event of a transient power occurrence in the 
core 2. 

15 Those initial conditions are obtained by xenon fluctuations which are produced by 
instantaneous variations in the total power P of the reactor 2 combined with 
movements of the control clusters 20, leading to disruptive distributions of power 
in the core 2. 

20 Thus, the initial conditions can be characterized by: 

- the rate of burn-up in the rods 24, 

- the total power P supplied by the core 2, 

- the axial distribution of power in the core 2, 

- the axial distribution of xenon, 

25 - the position of the control clusters 20 and 

- the concentration of boron in the water of the primary circuit 8. 

After the step schematically indicated by the-block 64, transient operational 
occurrences of the reactor 1 during accidents which bring about abrupt variations 
30 in power are simulated, as schematically indicated by the block 67. Those 
transient occurrences are simulated, for example, by m e ans of th e p ie c e s of 
software 63 and 65. The transient occurrences during accidents are simulated 

MARKED UP VERSION OF THE 

SUBSTITUTE SPECIFICATION 13 

DOC 985132V1 



from the initial conditions established in step 64, at several moments in each 
cycle. 

The simulated transient occurrences are so-called category 2 transient 
5 occurrences during accidents which bring about the greatest and the most rapid 
variations in power in the core 2. 

Those transient occurrences are as follows: 

- excessive increase in load, 

10 - uncontrolled removal of groups of control clusters 20 whilst the 

reactor 1 is in use, 

- cluster(s) 20 falling. 

The excessive Increase in load corresponds to a rapid increase in the flow rate of 
15 steam in the steam generator 3. Such an increase brings about disequilibrium 
between the thermal power of the core 2 and the load of the steam generator 3. 
That disequilibrium leads to cooling of the primary circuit 8. Owing to the 
moderating effect and/or the control of the mean temperature in the core 2 by the 
control clusters 20, the reactivity and therefore the nuclear flux increase in the 
20 core 2. Thus, the total power P supplied by the core 2 increases rapidly. 

In order to simulate that transient occurrence, it is considered that the steam flow 
rate in the generator 3 increases from Its initial value up to the maximum value 
permitted by the characteristics of the secondary circuit 12. That increase is 
25 further sufficiently slow for the power levels studied to prevent the automatic 
shutdown of the reactor owing to low pressure in the pressurizer 10. 

The uncontrolled removal of groups of control clusters 20 whte twhile the reactor 
is operating brings about an uncontrolled increase in the reactivity. This results in 
30 a rapid increase in the total nuclear power P and the flux of heat in the core 2. 
Until a relief valve or a safety valve of the secondary circuit 12 is opened, the 
extraction of heat in the steam generator 3 increases less rapidly than the power 
released in the primary circuit 8. This results in an increase in the temperature 
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and the pressure of the water of the primary circuit 8. In order to simulate that 
transient occurrence, there is assumed a removal of the power groups at the 
maximum speed of 72 pas/mn up to complete removal. 

5 If one or more of the control clusters 20 drops into the core, an immediate 
reduction in the reactivity and the total power P in the core 2 results. In the 
absence of any protective action, the disequilibrium brought about in this manner 
between the primary circuit 8 and the secondary circuit 12 brings about a 
decrease in the inlet temperature of the water in the core 2 as well as an increase 
10 in the neutron power ewm odue to the counter-reactions and the temperature 
control, until a new equilibrium is reached between the primary circuit 8 and the 
secondary circuit 12. The presence of the control cluster(s) 20 which have 
dropped brings about a deformation in the radial power distribution, whereas the 
removal of the control group leads to an axial modification of the power. 

15 

It has been found that other transient power occurrences during accidents did not 
need to be simulated because they were found to be less disruptive than those 
cited above. This is particularly the case for a dilution accident. 

20 After the historical power data have been established and the transient 

occurrences during accidents have been simulated, in step 68 the value of the 
physical quantity Oee reached in the rods 24 during the transient occurrences 
simulated in step 67 will be calculated. That step 68 uses the results of the steps 
62 and 67. In fact, the step 68 will comprise, for each transient occurrence, a first 

25 subsidiary step in which the calculation will be carried out roughly for each of the 
rods 24. That rough calculation can be carried out by means of the software 60. 
By way of a variant, the calculation may be carried out only for 1/8 of the rods 24 
for reasons of symmetry of the core 2. 

30 Therefore, the rod 24 in which the highest value of the physical quantity Oee is 
reached will be established. Therefore, this will be the rod 24 whose cladding 33 
is most stressed, or the limiting rod. By way of a variant, it is possible to select a 
plurality of limiting rods. 
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Once the limiting rod 24 has been established in this manner, the maximum value 
of the physical quantity Oee reached in its cladding 33 will be precisely calculated 
in a second subsidiary step for that single rod 24. That precise calculation can be 
5 carried out by the software 60. 

Subsequently, as schematically indicated by the block 70, it will be possible to 
establish, by comparison of the maximum value calculated in step 68 with the 
failure value OeoRUP established in step 50, whether a risk of failure of the cladding 
10 33 is encountered during a transient occurrence during accidents. 

In this manner, it will be possible to establish, during step 70, the values of 
operational parameters of the core 2 at the moment of failure of the cladding 33 in 
the case of simulated transient occurrences during accidents. Those values 
15 established will then be the limit values for the operational parameters which a 
person operating the reactor 1 must comply with. 

Such an operational parameter can be, for example, the power per unit length 
PLIN in the rods 24. The limit value of the parameter established in this manner 
20 can be used in order to control the reactor 1 and in particular to establish 
thresholds for an emergency shutdown or an alarm. 

The emergency shutdown threshold may be, for example, equal to the PLIN 
value established during step 70 and the alarm thresholds correspond to that limit 
25 value reduced, for example, by a given percentage. 

In specific embodiments of the method, the following operating modes of the 
reactor 1 are taken into consideration during steps 64 and 67: 

- basic operation, with the reactor 1 operating at its nominal total power 

30 PN, 

- extended operation at intermediate total power PI, 

- reversion to basic operation after extended operation at intermediate 
total power PI, 
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- continuous network operation, 

- primary control operation, 

- operation with remote-control. 

5 The simulation of a transient occurrence during accidents during basic operation 
corresponds, for each rod 24, to the simulation of a power gradient, such as that 
illustrated in Figure 6. 

Extended operation at intermediate power is defined as being operation of the 
10 reactor 1 in a permanent operating state at a total power Pi which is less than or 
equal to approximately 92% of Its nominal power PN over a time of more than 8 
hours per 24 hour period. 

Such operation has the effect of deconditioning the pellets 36 in the rods 24. 

15 

If the power decreases locally, a reduction in temperature results in the pellets 36 
and in the cladding 33, which leads to a reduction in the thermal expansion of 
those elements. Each pellet 36 has a greater thermal expansion coefficient than 
that of the cladding 33 and therefore retrocedes a greater absolute expansion. 

20 

That phenomenon is further accentuated in that, for a given local power 
reduction, the variation in temperature in each pellet 36 is greater than that in the 
cladding 33. 

25 For the rods 24 in which contact between the cladding 33 and the pellets 36 has 
not been established, the radial play J increases. With regard to the rods 24 in 
which the play J was closed, the play J re-opens. 

Should the play J re-open, there is creep in terms of compression of the cladding 
30 33 owing to the effect of pressure. This results in an increase in the stress Oee in 
the cladding 33 when the transient occurrence occurs during accidents. 
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Figure 9 illustrates, for a rod 24, the simulation of a transient occurrence during 
accidents during such operation. The power per unit length PLIN in the rod 24 is 
marked therein on the ordinate and the time t on the abscissa. 

5 The portion 72 of the line corresponds to extended operation at intermediate 
power. The power per unit length PILIN in the rod 24 is then less than the 
nominal power per unit length PNLIN which corresponds to the nominal total 
power PN. The transient occurrence, which corresponds to a power gradient, is 
schematically indicated by the portion 74 of that same line. That transient 
10 occurrence terminates in failure of the cladding 33 at the point 76. 

The simulation of extended operation at intermediate power can be carried out for 
several intermediate power values PILiN in order to cover various situations 
which may be encountered when the reactor 1 is used. 

15 

Furthermore, this simulation can be carri e d out performed in order to establish the 
maximum permitted duration tmax of that operating mode so that the transient 
occurrence 74 following the stage 72 does not cause a failure of the cladding 33. 

20 To that end, stages 72 of increasing duration are simulated until the failure value 
of the physical quantity selected is reached. The time tmax is the duration of the 
stage 72 for which the failure value is reached. 

It is advantageous to study reversion to basic operation after extended operation 
25 at intermediate power with regard to the interactions of pellets/claddings for the 
following reason. 

If the local power increases, there results an increase in the temperatures in the 
pellets 36 and in the cladding 33 of a rod 24. The thermal expansion coefficient of 
30 each pellet 36 being greater than that of the cladding 33, the pellet 36 imposes its 
deformation on the cladding 33, bringing about relatively high stresses therein. 
Therefore, reconditioning of the fuel is brought about. 
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Such operation is illustrated by the line in Figure 10, in which the stage 72 at the 
power per unit length PILIN is followed by a stage 78 at the nominal value PNLIN. 

For the simulation of reversion to basic operation, the stage 72 of Figure 10 
5 preferably lasts the time tmax. 

Continuous network operation is operation in which the reactor 1 operates 
alternately around a reduced total power PR and in the order of its nominal total 
power PN. The reduced power can be, for example, approximately 30 or 50% of 

10 PN. For example, the operation duration around the reduced power can be 8 
hours and that in the order of maximum power PN 16 hours per period of 24 
hours. The total power P may vary in each phase around the corresponding 
reference value PR or PN in order to be adapted to the needs for electrical 
energy of the network supplied by the generator 5. When the reference value is 

15 PN, the variations in power are only negative. 

The simulation of the operation in this mode can be carri e d out performed from 
basic operation. 

20 In that case, the value calculated previously reduced by a corrective value is used 
as the failure value. That corrective value can typically be mon the order of 20 
MPa when the physical quantity in question Oee is a stress or a difference in stress 
levels. 

25 In order to establish the corrective value, it is possible to use the software 60. 
Transient occurrences during basic operation and transient occurrences during 
continuous network operation are roughly simulated. 

In order to simplify the calculations, it is possible to model continuous network 
30 operation according to the line of Figure 1 1 , in which the power per unit length 
PLIN is marked on the ordinate and the time t is marked on the abscissa. 
Fluctuations around the upper and lower values are not illustrated. In order to 
take them into consideration, a plurality of simulations are carried out with 
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reduced power levels PRLIN and raised power levels PELIN in the variation 
envelopes. The difference between the maximum values of Oee calculated by the 
software 60 for the two operating modes then constitutes the corrective value. 
In the primary control operating mode, the total power P fluctuates around a 
5 reference value mon the order of 98% of PN. Variations around that reference 
value may be in the order of plus 2% and minus 3% of PN. 

In remote-control operating mode, the total power P fluctuates around a reference 
value in the order of 92% of PN. Variations around that reference value may be 
10 mon the order of plus 8% and minus 7% of PN. 

In the same manner as for continuous network operation, primary control 
operation and remote-control operation can be simulated from basic operation, 
the value of the physical quantity which characterizes the failure again being 
15 affected by a bias. 

In that manner, only a single calculation is carried out during basic operation and 
a corrected failure value is used to take into consideration basic operation, 
continuous network operation, primary control operation and remote-control 
20 operation. 

In a s i mo l e r another embodiment, it is possible to take only basic operation into 
consideration. 

25 The simulation of the basic operating mode, or the various simulations of the 
operating modes, can be carried out for each respective configuration of the 
groups of control clusters 20, at different rates of burn-up of the rods 24. 

Thus, for example, there is provided a limit value for the power per unit length 
30 PLIN for each configuration of control clusters 20 and by rate of burn-up. 

In addition to those limit values which will be used as thresholds for automatically 
shutting down the reactor 2, the step 70 of Figure 5 also allows thresholds to be 
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established, from which actions other than the shutdown of the reactor 2 will 
automatically be triggered. These are, for example, a so-called C4 threshold 
which corresponds to the threshold values for an emergency shutdown reduced 
by 3%, and from which values the load of the turbine 4 will automatically be 
5 limited. 

This may also be an alarm threshold which can be adjusted to the threshold 
values C4 reduced by 3%. 

10 The method carried out in this manner may result in a limitation of the envelopes 
of use illustrated in Figure 8. 

in that Figure, the reference numeral 90 indicates the envelope which 
corresponds to category 2 operational situations. That envelope is located around 
15 the envelope 66. The reference numerals 92 indicate boundaries (as dashed 
lines) of that envelope, as they were established before the method according to 
the invention was used. 

Using the method of the invention leads to some of those boundaries 92 being 
20 redefined. The new boundaries 94 are illustrated as solid lines in Figure 8. As can 
be seen, the envelope 90 which is redefined based on the method of the 
invention is therefore narrower. The boundaries 94, which correspond to the 
thresholds for an emergency shutdown, are therefore more strict than those 
currently used. Operation of the reactor 1 using the limit parameters which are 
25 obtained by the method is therefore safer. 

It should be noted that each portion to the right of the boundaries 94 corresponds 
to pairs of limit values of P and AAI. 

30 The time tmax established also constitutes a limit value for an operational 
parameter which is established by means of the method. That value allows an 
operator to increase the operating time at reduced power and therefore to 



MARKED UP VERSION OF THE 
SUBSTITUTE SPECIFICATION 
DOC 9851 32v1 



optimally exploit the capabilities of the reactor 2 by reducing the risks of damage 
to the rods 24. 

In that manner, the method described allows the limit values of operational 
5 parameters and the safety procedures to be verified, the limit values for 

operational parameters of the reactor 1 to be modified, if necessary, and old limits 
which are too narrow to be converted into a margin for use. I n that 
mann e r Conseouentlv . it is possible to ensure safe operation thereof, whilst 
optimally exploiting its capabilities. 

10 

I n a g e n e ral mann e r, the st e p Step 50 can be carried out separately from the 
remainder of the method for establishing limit values of operational parameters of 
the reactor 2. 

15 I n a g e neral mann e r. th e The various steps of this method can also be carried out 
by one and the same piece of software stored in the meafts arranoement 44. The 
principles above can be applied to types of reactor other than pressurized water 
reactors, for example, boiling water reactors. 
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ABSTRACT 

This m e thod compris e s A method of determining a threshold value of a nuclear 
reactor ooeratino oarameter having the steps offb) simulating at least a transient 
operational occurrence of the nuclear reactor, G)-calculating the value reached by 
a physical quantity during the transient operational occurrence in at least a 
cladding-<3^ of a fuel rod (2d) of the reactor andd) establishing, as a limit value 
of an operational parameter of the reactor, the value of the operational parameter 
when the value calculated in st e p c) the step of calculatino the value reached bv a 
phvsical Quantitv durin o the transient operational occurrence which corresponds 
to a value of the physical quantity which characterizes a failure of the cladding 

F i gur e 3. 
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